CVE-2014-2265: Rocklobster Contact Form 7

Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days.

Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data by omitting the _wpcf7_captcha_challenge_captcha-719 parameter.

Affected products

• Rocklobster Contact Form 7: up to and including 3.7.1; version 3.6 only; version 3.7 only

Published 2014-03-14. Last modified 2026-06-17.